News for hackers. Stuff that matters.
Re:Google disabled my husband's account by kodah on Thursday October 15, 2020 @02:41PM (#24792188)
I don't think the internet was ever going to become regulated. What did occur post-2007 was that what made the internet work as a disparate ecosystem of loosely connected destinations (news groups, message boards, blogs, misc websites) that all played their own very important role, controlled and owned by their own communities became one platform under Facebook, Twitter, Reddit, etc... and was controlled and owned by people who had no identity-based connection to the people using those platforms.

This is largely based on my own observations and could be wrong, but it's my theory. Tech companies robbed an internet culture they didn't even realize or appreciate existed, and then shoved a bunch of people who had never used the internet before on it and convinced them that Facebook was the internet. Or rather, that the standards, norms, and culture on Facebook was somehow reflective of everything outside of Facebook. Just replace Facebook with the growing list of companies who engage in "platforms" in varying degrees.

tldr: this obsession with centralization made no sense to the way we do things as a human species, any of our values, any of our culture, and we let it happen anyway. The chickens have come home to roost.

Re:Google disabled my husband's account by jbay808 on Thursday October 15, 2020 @03:34PM (#24792812)
I definitely think that what you're saying is true, and is part of the explanation. But another part is that the Wild West internet also had its own major issues -- roving bandits, to carry the analogy -- and these big companies did solve real problems that were only growing with time.

Gmail's spam filtering. Recaptcha's bot rejection. Facebook's identity verification. Paypal's secure credit card processing. Google de-ranking link farms. Youtube's hosting costs. All of these very effectively solved real problems with the old web, and those problems were growing as bad actors became more sophisticated.

I like the old web too, but I do appreciate that an attempt to return to it would still require very effective tools to solve at least some of these problems, and they'd require constant improvement to keep the roving bandits at bay.

Re:Google disabled my husband's account by jjav on Thursday October 15, 2020 @04:32PM (#24793527)
I believe this is an overly rosy-glasses view of the current heavily centralized internet.

Gmail spam filtering? Isn't particularly good. I run my own email infrastructure and I get way less spam through it than on my gmail address. And I don't do anything particularly special other than configure postfix correctly.

Recaptcha? Was there ever a more hated piece of user abusive technology? Plenty of rage against it here in many discussions. I won't do business anymore with any site that won't let me buy without identifying 27 traffic lights in slow motion (looking at you adorama). We're all better off if this dies.

Facebook verification? Don't know what value this brings to anyone other than FB.

Youtube? Granted.. Hopefully with bandwidth costs reducing over time, decentralization becomes more viable.

Paypal? Always pay with credit card directly. The regulatory consumer protection for that was well in place before internet commerce even took off.

The original potential of the internet was in its fully decentralized functionality. Usenet being a great example (owned by nobody, hosted peer to peer) which should be studied a bit more now that we have generations of developers coming up never having known it. Of course, it was (mostly) overrun by spam. But unlike email where spam is pretty much defeated, there was never a meaningful effort in addressing spam on Usenet (forums and mailing lists took over instead). Applying the same techniques to NNTP could well be equally successful.

If there is any desire to avoid the internet becoming fully a new cable-tv controlled by just a few major player we need to pursue research into decentralized services as a priority.

(If nothing else, consider at least running your own email infrastructure if you're technically capable. Keep the foot in the door so it doesn't close permanently.)

Re:Google disabled my husband's account by jbay808 on Thursday October 15, 2020 @04:57PM (#24793815)
It's more of an attempt at a steelman. Just for the record, I don't like the current centralized internet; I've all but deactivated my facebook account; when a site requires a Google or Facebook verified login ID without their own "create account" option I avoid them at all costs; I avoid Paypal now because there are better alternatives (but in the early '00s, I would not have trusted most sites enough to pay with a card). And so on. I'm not trying to advocate for their position, but just understand the problems that they solve and why we got here.

And while I hate using recaptcha, I also had the even more unpleasant experience of watching a forum that I moderated die under a crushing assault of spam bots that were smart enough to make it past the built-in CAPTCHA. Recaptcha isn't there to solve problems for the people who interact with it, it's solving problems for the people who chose to put it on their site.

I wrote in a sibling comment what value Facebook's login brings to the sites that opt into it. (Offload all the work of password handling, claims about stolen accounts, preventing sockpuppetry and catfishing, etc).

Re:Google disabled my husband's account by jdofaz on Friday October 16, 2020 @05:16PM (#24805136)
You can't look up voting locations without a reCAPTCHA challenge https://recorder.maricopa.gov/pollingplace/default.aspx
Re:Google disabled my husband's account by jjav on Friday October 16, 2020 @06:05PM (#24805501)
This is particularly pernicious. If a private business does it I'll hate on them but oh well, it's their business at the end of the day.

But there should be accessibility laws to prevent government agencies from blocking access to citizens/taxpayers using these proprietary technologies.

Re:Google disabled my husband's account by danaris on Friday October 16, 2020 @09:59PM (#24806882)
What's the alternative?

I don't know offhand of an open-source captcha library that's nearly as effective as reCAPTCHA. All the old "wavy lines through slanted text" ones are completely broken with current OCR techniques.

Re:Google disabled my husband's account by jjav on Monday October 19, 2020 @03:55AM (#24824159)
The alternative is nothing. There is no justifiable reason for a CAPTCHA for looking up voting locations. It can be a static HTML page served to anyone in the world.
Re:Google disabled my husband's account by skratlo on Thursday October 15, 2020 @03:43PM (#24792916)
I don't think you're right.

> Facebook's identity verification

in real life, do you need to know the real name of the cashier and see their contract so you can trust them with your payment? You don't, you use common sense.

> Google de-ranking link farms

hey, haha, and what do we get instead? Monopoly on ad-driven search engine, great, I'd rather have link farms since I can easily filter those out with little brain-power. I can't do that with paid-for-propaganda

Now imagine we'd leave the way it was, people would learn how to deal with it, the same way you learned you can't leave unlocked bicycle in a city. It's a price to pay for anonymity, and we should all have right to be anonymous on internet.

Re:Google disabled my husband's account by dhimes on Thursday October 15, 2020 @04:00PM (#24793107)
Yeah, Google kind of created the link-farm ecosystem because it rewarded links— again, without verification etc. but just algorithmically.
Re:Google disabled my husband's account by kodah on Thursday October 15, 2020 @03:44PM (#24792927)
100%, I agree, going back to the Wild Wild West probably isn't the thing to do, but I think we can look at decentralization through the lens of modern tools for a brighter and more equitable future for the internets new and old denizens.

A couple of ideas I've had:

- Leverage PGP and trust rings for identity without a need for non-anonymity. This could be structured in a nuanced manner so that we respect pseudo-anonymity while also maintaining the integrity that real identity brings.

- A wholesale education of the populace, instead of an education by fear, of the power of anonymity and services which further anonymity.

- A move away from the advertising and services-exploitation business model. Not that we can't have service oriented businesses, but those businesses cannot be exploiting people to do labor and a bottom line price.

- A data ownership model which establishes a monetary value for different types of data. We already do data classification inside mega-corps, and we're able to establish and correlate it's sensitivity. Extrapolating this to value would not be stretch. Users consent which data they give up in exchange for services. The price for the service is adjusted based on what data they give up, and how they choose it will be used (Data for marketing may be more valuable than say data for behavior research, or even vice versa!)

Re:Google disabled my husband's account by nyanpasu64 on Thursday October 15, 2020 @03:38PM (#24792869)
> Gmail's spam filtering. Recaptcha's bot rejection.

> Facebook's identity verification.

The ability to choose an identity online not connected to your legal or in-person name, to make it more difficult to find and stalk you in person, is a feature, not a bug.

Re:Google disabled my husband's account by jbay808 on Thursday October 15, 2020 @04:33PM (#24793540)
I don't disagree, but a lot of websites these days choose to offload their login systems to Google and Facebook to certify that a unique human is on the other end. It solves real problems for them like password management, bot detection, astroturfing, sockpuppetry, stolen accounts, and so on.

For these purposes, an actual Real Verified Name is overkill, and a unique identity number would be enough. But Facebook offers that service for Free(TM) so there's not much incentive to the site operator to aim for something more minimal. And with GPT-3 and other systems inching closer to passing the Turing test, this only makes alternatives more challenging for them.

Those are problems in the Wild West that would need solutions if we were to reclaim the net from Facebook and Google.

Re:Google disabled my husband's account by kodah on Thursday October 15, 2020 @10:48PM (#24796929)
What links those accounts is not special, it's OAuth2. I don't think there's anything stopping different groups from running open OAuth2 endpoints that just provide a PGP based identity service. I actually wondered why Keybase didn't start an OAuth2 endpoint, because it'd put a big dent in some of the services you described.
Re:Google disabled my husband's account by nyanpasu64 on Friday October 16, 2020 @10:15AM (#24801003)
I see GitHub OAuth logins in some programmer-centric websites. I prefer that over Google login (and god forbid Facebook). It's just as bad from a login-centralization perspective, but GitHub allows you to control your identity freely, instead of mandating (and more-or-less enforcing) your legal name like Facebook.

(Google no longer rejects or bans you for fake-sounding names, ever since the Google+ controversy, but it still enforces a Western-style first/last name instead of other cultures' name formats or single-part usernames.)

Re:Google disabled my husband's account by xenophonf on Saturday October 17, 2020 @10:26PM (#24815081)
WebAuthn is right there and built into Windows 10 and macOS now. I don't understand why it isn't seeing more adoption.
Re:Google disabled my husband's account by naringas on Thursday October 15, 2020 @02:46PM (#24792257)
imo the need for 'centralization' comes from the fact that in order for different people to understand each other, they must use the same dictionary (so to say). So the 'dictionary' is a centralized construction. It must be the same for everybody.

If our dictionaries vary to much in their definitions then our communication becomes more and more difficult.

Maybe dictionary is not the best analogy (this is just an analogy) but I hope I'm getting my point across with this example.

Re:Google disabled my husband's account by neltnerb on Thursday October 15, 2020 @02:50PM (#24792308)
I used the internet without facebook before it existed. I had a Facebook account for over a decade. I haven't had a Facebook account in two years.

To the extent that what you are saying is true, it is only true because these companies have walled themselves off. You used to be able to chat with Facebook users over XMPP even.

Re:Google disabled my husband's account by kodah on Thursday October 15, 2020 @02:55PM (#24792357)
Yeah, I agree. If I remember XMPP was dropped while using that old adage of "scale", which maybe was real, but in the end the net effect is the same. Advanced users know a broader breadth of the internet while most internet users only know the depth of Facebook and other various platforms.
Re:Google disabled my husband's account by neltnerb on Thursday October 15, 2020 @03:42PM (#24792907)
I guess once they got big enough there was no longer a point in interoperability, it seems like a pretty big phase transition got hit about a decade ago where suddenly each walled garden got big and valuable enough that isolation was a better strategy for them.

It just sucks for the internet. I don't think, if those companies ceased to exist, that they would automatically get recreated because of some inevitable niche or market law. I think that they got where they are because of a fluke of the times they were created in -- people could not grasp how they make money.

Re:Google disabled my husband's account by kodah on Thursday October 15, 2020 @02:51PM (#24792314)
I understand the motivation. I work on platforms teams internally for companies (and have for a number of years). In smaller scale, this concept largely makes sense because developers at a single company come from a single culture which those developers largely have already bought into or are actively being shoveled into by corporate work. This is the role a lot of developer advocates play at companies who don't have external developer customers.

In large scale, what you're asking is more dubious. If you concede that the United States alone has 11 major cultures, then you have to begin a process of "on-boarding" everyone onto your new, structured culture that your platform is designed around. That's why these debates about who is represented in the building of the platform come about, because under that model those concerns take center stage and they should.

I guess what I'm saying is the whole problem never needed to exist. There's better ways to share information than being on one platform.